Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QIgJV1tlNC94oVW5sr8oCiMx2qg.roa
File: QIgJV1tlNC94oVW5sr8oCiMx2qg.roa (raw, json)
Hash identifier: JvbQIAfjfuaOzh0GMdURJOURlbHLN7UhSel6gTOHMWo=
Subject key identifier: 40:88:09:57:5B:65:34:2F:78:A1:55:B9:B2:BF:28:0A:23:31:DA:A8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01856F66E8A67F0CFC5235A13967A308AEF3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QIgJV1tlNC94oVW5sr8oCiMx2qg.roa
Signing time: Sun 01 Jan 2023 22:14:53 +0000
ROA not before: Sun 01 Jan 2023 22:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 79.172.226.0/24 maxlen: 24
79.172.230.0/23 maxlen: 23
79.172.254.0/24 maxlen: 24
87.229.117.0/24 maxlen: 24
87.229.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:e8:a6:7f:0c:fc:52:35:a1:39:67:a3:08:ae:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 1 22:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=408809575b65342f78a155b9b2bf280a2331daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:37:31:dc:2b:89:7f:1a:d5:72:5a:88:fb:
58:87:3e:49:dc:91:71:9a:32:ac:56:98:f6:94:92:
87:1f:eb:a0:2e:ee:fd:fa:9a:26:80:e0:eb:5a:bb:
22:fe:24:34:e3:b2:c6:76:3a:5a:79:4a:31:97:4b:
94:73:ee:30:81:34:e4:49:bc:ed:60:82:b6:5e:a8:
56:86:49:d4:4b:39:d6:4f:aa:68:69:6c:b4:35:02:
0d:42:57:6c:5a:6f:94:a0:1b:70:47:00:3a:e8:82:
b3:06:4b:d0:66:56:3e:f6:78:f0:5a:fe:d0:d8:76:
b9:da:7e:c3:9d:63:30:58:ee:d3:b5:84:50:9d:35:
f3:6f:cb:f2:c1:ea:88:c4:0d:b5:54:ab:71:73:e8:
39:a7:35:a8:59:03:8b:11:ea:9c:91:93:02:c3:f4:
17:9b:67:1f:b2:67:5b:86:75:78:94:b1:13:e1:af:
15:60:5c:15:7d:ef:fb:34:f9:5c:91:6f:51:f8:10:
a1:9d:8a:9d:e9:ce:a5:27:b0:4a:1a:27:01:90:1c:
c0:5f:33:fe:a6:a7:4a:0b:bc:40:1a:33:53:37:8c:
76:69:85:48:24:e3:8f:b5:cb:21:85:07:59:db:c8:
65:e9:cc:95:38:b8:d8:a6:be:67:17:45:c9:de:77:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:88:09:57:5B:65:34:2F:78:A1:55:B9:B2:BF:28:0A:23:31:DA:A8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/QIgJV1tlNC94oVW5sr8oCiMx2qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.226.0/24
79.172.230.0/23
79.172.254.0/24
87.229.56.0/24
87.229.117.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6f:0c:ba:59:75:97:3e:c7:9f:7f:04:5d:a0:33:fe:7a:ee:
81:d8:f8:2a:3c:ab:f3:10:e7:2f:6f:8f:8e:3b:43:87:3d:92:
79:cc:53:ac:c7:60:21:c8:fe:7e:e0:fd:cd:8e:90:91:fc:cb:
c0:a9:5f:f2:2e:a4:ad:22:3b:e9:4c:24:b2:51:72:88:89:f3:
94:4c:a9:61:b6:ec:a2:f6:a8:6d:fb:b9:cd:c7:a2:6f:e4:14:
3c:cd:b4:d6:7b:cf:7e:50:6e:09:ca:85:3b:aa:30:fc:da:dc:
97:f8:8c:06:f4:a7:3c:9d:da:8b:7c:a9:78:dc:1c:7a:90:49:
85:8c:05:eb:c4:b5:f3:42:dd:84:01:fa:f9:6f:db:d6:76:21:
7d:52:3d:28:54:0b:36:cc:e2:52:a3:37:49:0c:27:1e:76:73:
a8:78:c5:ed:90:f7:98:b4:37:cc:34:eb:f4:94:29:3d:7a:10:
cc:76:a2:2e:b8:a7:05:82:e8:bb:27:60:af:95:98:55:e4:2c:
5a:f5:2a:77:e1:aa:b7:f9:98:83:72:8c:6f:a1:98:c4:8a:c4:
85:91:d0:75:77:d2:ed:c8:7a:ed:df:91:9f:98:9e:59:a6:9e:
9f:10:26:05:c1:41:a1:8d:cd:8d:d0:88:1d:3d:f6:33:36:0e:
98:f9:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:11 2025 by rpki-client